摘要:
On Darwin, building a Go module which contains CGO can trigger arbitrary code execution when using the Apple version of ld, due to usage of the -lto_library flag in a "#cgo LDFLAGS" directive.
安全等级: Low
公告ID: KylinSec-SA-2024-2058
发布日期: 2024年5月27日
关联CVE: CVE-2024-24787
On Darwin, building a Go module which contains CGO can trigger arbitrary code execution when using the Apple version of ld, due to usage of the -lto_library flag in a "#cgo LDFLAGS" directive.
| cve名称 | 产品 | 组件 | 是否受影响 |
|---|---|---|---|
| CVE-2024-24787 | KY3.4-4A | golang | Unaffected |
| CVE-2024-24787 | KY3.4-5 | golang | Unaffected |
| CVE-2024-24787 | KY3.5.1 | golang | Unaffected |
| CVE-2024-24787 | KY3.5.2 | golang | Unaffected |
| CVE-2024-24787 | V6 | golang | Unaffected |
